Qualcomm Chipsets Buffer Copy Without Input Size Verification Vulnerability

Vulnerability

A memory corruption vulnerability has been identified in various chipsets by Qualcomm. This issue arises from a buffer copy operation that does not properly check the size of the input, leading to potential memory corruption. The vulnerability may be triggered during voice call registration processing.

Impact

Exploitation of this vulnerability can lead to memory corruption, which may cause unpredictable behavior in the application or system, including potential arbitrary code execution or causing the device to crash.

Remediation

Qualcomm has released patches for this vulnerability. Instructions for applying the patch can be found in the Qualcomm June 2025 Security Bulletin.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
0.6
exploitability
3.3
remediation
7.7
relevance
0.2
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.